FlowTracker Privacy Policy

Last Updated: September 3, 2024

1. About Us

FlowTracker is developed and maintained by the Association for Water and Rural Development (AWARD), committed to protecting your privacy. This privacy policy outlines how we handle user data within our app.

2. Data Collection

FlowTracker does not collect any personal or sensitive user data. The application operates without accessing, storing, or sharing any user-specific information.

3. Data Use

Since no data is collected, FlowTracker does not use any personal or sensitive data.

4. Data Sharing

FlowTracker does not share any user data with third parties, as no personal or sensitive data is collected.

5. Data Security

While FlowTracker does not handle personal or sensitive data, we ensure the security of the data processed by the application through the following measures:

5.1. Server Security

• Access to the server requires a 4096-bit RSA key pair.
• Root logins over SSH are disallowed. All SSH connections are made by a non-root user with varying administrative privileges.
• The server listens on only one internet protocol (e.g., IPv4 or IPv6).
• IP addresses are banned after too many failed login attempts.
• A firewall is in place to manage all firewall rules (e.g., port access).

5.2. Domain Security

An SSL (Secure Socket Layer) certificate ensures a secure connection between the domain name and the intended IP destination, preventing reroute attacks. This aligns with the South African Protection of Personal Information Act (POPIA).

5.3. Database Security

Data processed by FlowTracker is encrypted during storage and decrypted during retrieval. The following encryption methods are used:

• MD5 (Message-Digest Algorithm) hashing for one-way data verification.
• AES (Advanced Encryption Standard) for two-way encryption processes.

6. Data Retention and Deletion

FlowTracker does not collect or retain personal or sensitive user data. Therefore, no data deletion policy is required.

7. Contact Information

If you have any questions or concerns about this privacy policy, please contact us at:

Email: hguo@award.org.za

Address: 2 Maroela Park, Koedoe Street, P.O Box 1919, Hoedspruit, 1380